KelpDAO Exploiter Begins Moving Funds to Bitcoin; Aave Unfreezes WETH on Ethereum Core V3

cryptocrypto-hacksdefi 9 posts · 6 accounts

The KelpDAO exploiter has begun laundering roughly $176 million in stolen funds, moving small batches from Ethereum toward the Bitcoin network through THORChain, Umbra Cash, Chainflip and BitTorrent. CertiK separately reported that the attacker was actively routing funds to Bitcoin via THORChain.

Separately, Aave said in an update on the rsETH incident that WETH reserves on its Ethereum Core V3 market have been unfrozen, allowing users to supply WETH again, although the loan-to-value ratio remains at 0. WETH reserves on Ethereum Prime, Arbitrum, Base, Mantle and Linea remain frozen.

From the sources (9 posts)

@peckshieldalert

#PeckShieldAlert The @KelpDAO exploiter has begun laundering stolen funds (~$176M). They have started bridging small batches of funds from #Ethereum to $BTC via @THORChain, @UmbraCash, @chainflip, and @BitTorrent.

@peckshield

The latest fund movement from the @KelpDAO exploiter:

@peckshieldalert

RT @peckshield: The latest fund movement from the @KelpDAO exploiter:

@peckshieldalert

@RuskMary1 @peckshield @KelpDAO The @KelpDAO Exploiter has initiated a native bridge withdrawal. By sending $ETH to the 0x...0DA0 precompile, they are moving funds from #Arbitrum back to #Ethereum mainnet. This confirms the exploiter is beg

@wublockchain

Aave released an update on the rsETH incident: WETH reserves on the Ethereum Core V3 market have been unfrozen, allowing users to supply WETH again, though its LTV remains at 0. Meanwhile, WETH reserves on Ethereum Prime, Arbitrum, Base, Ma

@degeneratenews

NEW: @aave ANNOUNCES "WETH RESERVES ON THE ETHEREUM CORE V3 MARKET HAVE BEEN UNFROZEN AND USERS CAN SUPPLY WETH TO ETHEREUM CORE V3 AGAIN. WETH LTV REMAINS AT 0. WETH RESERVES ON ETHEREUM PRIME, ARBITRUM, BASE, MANTLE, AND LINEA REMAIN FROZ

@peckshieldalert

#PeckShieldAlert @KelpDAO exploiter has moved 75.7K $ETH to 2 new addresses

@certikalert

#CertiKInsight 🚨 The @KelpDAO attacker is currently moving funds to Bitcoin Network via @THORChain.

@certik

RT @CertiKAlert: #CertiKInsight 🚨 The @KelpDAO attacker is currently moving funds to Bitcoin Network via @THORChain.

U.S. Treasury Sanctions 14 Targets in Iran Missile and Drone Network SpaceX IPO Filing Shows Musk Can Keep Board Control